Fetch URL and return all HTTP response headers plus security audit (HSTS, CSP, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy). Returns security_score 0-100 and missing headers list. Built for security agents and compliance audits. Use url param